DISA_STIG_MongoDB_Enterprise_Advanced_3.x_DB_v1r2.audit

MD3X-00-000020 - MongoDB must enforce approved authorizations for logical access to information and system resources in accordance with applicable access control policies.

800-53|AC-6(7)

CAT|II

CCI|CCI-000213

Rule-ID|SV-96559r1_rule

STIG-ID|MD3X-00-000020

Vuln-ID|V-81845

MD3X-00-000270 - The role(s)/group(s) used to modify database structure (including but not necessarily limited to tables, indexes, storage, etc.) and logic modules (stored procedures, functions, triggers, links to software external to MongoDB, etc.) must be restricted to authorized users.

CCI|CCI-001499

Rule-ID|SV-96571r1_rule

STIG-ID|MD3X-00-000270

Vuln-ID|V-81857

MD3X-00-000310 - MongoDB must uniquely identify and authenticate organizational users (or processes acting on behalf of organizational users).

CCI|CCI-000764

Rule-ID|SV-96577r1_rule

STIG-ID|MD3X-00-000310

Vuln-ID|V-81863

MD3X-00-000370 - MongoDB must map the PKI-authenticated identity to an associated user account.

CCI|CCI-000187

Rule-ID|SV-96587r1_rule

STIG-ID|MD3X-00-000370

Vuln-ID|V-81873

MD3X-00-000390 - MongoDB must uniquely identify and authenticate non-organizational users (or processes acting on behalf of non-organizational users).

CCI|CCI-000804

CCI|CCI-001082

CCI|CCI-001084

Rule-ID|SV-96591r1_rule

STIG-ID|MD3X-00-000390

Vuln-ID|V-81877

MD3X-00-000540 - MongoDB must associate organization-defined types of security labels having organization-defined security label values with information in storage.

CCI|CCI-002262

CCI|CCI-002263

CCI|CCI-002264

Rule-ID|SV-96611r1_rule

STIG-ID|MD3X-00-000540

Vuln-ID|V-81897

MD3X-00-000570 - MongoDB must enforce discretionary access control policies, as defined by the data owner, over defined subjects and objects.

CCI|CCI-002165

CCI|CCI-002235

Rule-ID|SV-96613r1_rule

STIG-ID|MD3X-00-000570

Vuln-ID|V-81899

MD3X-00-000650 - MongoDB must prohibit user installation of logic modules (stored procedures, functions, triggers, views, etc.) without explicit privileged status.

CCI|CCI-001812

Rule-ID|SV-96623r1_rule

STIG-ID|MD3X-00-000650

Vuln-ID|V-81909

MD3X-00-000670 - MongoDB must enforce access restrictions associated with changes to the configuration of MongoDB or database(s).

CCI|CCI-001813

Rule-ID|SV-96625r1_rule

STIG-ID|MD3X-00-000670

Vuln-ID|V-81911

MD3X-00-000780 - When invalid inputs are received, MongoDB must behave in a predictable and documented manner that reflects organizational and system objectives.

CCI|CCI-002754

Rule-ID|SV-96639r1_rule

STIG-ID|MD3X-00-000780

Vuln-ID|V-81925

Detections

Analytics

DISA STIG MongoDB Enterprise Advanced 3.x v1r2

Warning! Audit Deprecated

Audit Details

Audit Changelog

Revision 1.4

Miscellaneous

Revision 1.3

Miscellaneous

Revision 1.2

Miscellaneous

Revision 1.1

Miscellaneous


Revision 1.4 May 27, 2022 Miscellaneous Audit deprecated. Metadata updated. References updated.
Revision 1.3 Apr 25, 2022 Miscellaneous Metadata updated. References updated.
Revision 1.2 Jul 30, 2021 Miscellaneous Metadata updated. References updated.
Revision 1.1 Jun 17, 2021 Miscellaneous Metadata updated.